REMARKS 

The Office Action dated January 30, 2004 has been received and carefully noted. 
The following remarks are submitted as a full and complete response thereto. Claims 1- 
17 are respectfully submitted for consideration. 

Claims 1-17 were rejected under 35 U.S.C. 102(e) as being anticipated by 
Rowland (U.S. Patent No. 6,405,318). The Official Action took the position that 
Rowland teaches all of the elements disclosed in the claimed invention. Applicants 
respectfully submit that the presently pending claims recite subject matter that is neither 
disclosed nor suggested in the prior art. Therefore, the rejection is respectfully traversed 
and reconsideration is respectfully requested for the reasons which follow. 

Independent claim 1, upon which claims 2-9 are dependant, recites a method for 
dynamically modifying access right profiles in the operating system of a computer 
system. The method includes the steps of defining in the computer system access right 
profiles having individual command rights to the operating system of the computer 
system. The method fiirther includes the steps of recognizing the need for modification 
of the access right profiles in the computer system, reading the information contained in 
the access right profiles, establishing which access right profiles have to be modified, and 
modifying the access right profiles dynamically as necessary in view of the need for 
modification that has been recognized. 

Independent claim 10, upon which claims 11-17 are dependant, recites a system 
for dynamic modification of access right profiles in the operating system of a computer 




system, in which access right profiles having individual command rights regarding the 
operating system of the computer system have been defined. The system comprises a 
means for recognizing the need for modification of the access right profiles in the 
computer system, a means for reading the information contained in the access right 
profiles, a means for establishing which access right profiles have to be modified, and a 
means for modifying the access right profiles dynamically as necessary in view of the 
need for modification that has been recognized. 

As will be discussed below, the currently pending claims recite subject matter 
which is neither disclosed nor suggested in Rowland. 

Rowland discloses an intrusion detection method and system. The system 
automatically and dynamically builds user profile data that can be used to determine 
normal actions for each user. The user profile data is saved and updated every time the 
user logs on to the system. The system detects suspicious actions, determines the source, 
and institutes autonomous responses. The system mitigates the effects of an intrusion and 
prevents future actions without waiting for human intervention. 

The system disclosed in Rowland is considerably different than the claimed 
invention. Rowland is a system for modifying user profile data, whereas the claimed 
invention is a method for dynamically recognizing and modifying access right profiles. 
The user profile data in Rowland is not the equivalent of the access right profiles 
discussed in the claimed invention. The user profile in Rowland is simply a description 
of the user and their normal activities. Claim 1 in the pending application, however, 
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includes the step of "defining in the computer system access right profiles having 
individual command rights to the operating system of the computer system." The access 
right profile in the pending application includes data defining command class-specific 
powers, validity period of the password, and level of access to the MML command log. 
The user profile of Rowland does not contain access controls or run rights for conmiands; 
rather it merely describes the user's behavior while they are logged on to the system. 
Thus, the access right profiles recited in the claimed invention is not disclosed in the cited 
prior art. 

Another significant element of the claimed invention, which is not taught by 
Rowland, is the manner and timing of the modification to the access right profile. 
Rowland automatically updates the user profile every time the user logs into the system 
or out of the system. The method recited in claim 1 of the pending application, however, 
includes the steps of "recognizing the need for modification of the access right profiles in 
the computer system; reading the information contained in the access right profiles; 
establishing which access right profiles have to be modified; and modifying the access 
right profiles dynamically as necessary in view of the need for modification that has been 
recognized." The computer system automatically recognizes the need for a change in the 
access right profile, therefore the need to update is separately identified. Recognition by 
the system will occur when an event takes place that triggers the need for a change in the 
access right profile. Next, the access right profile is read to determine which specific 



access right profile needs to be changed. Then the access right profiles are changed 
dynamically as required. 

The solution set out by the claimed invention first determines the access right 
profiles, which include unique command rights to the display system of the computer 
system. Such an access right profile is not disclosed in Rowland. Rather, Rowland 
discloses that a controller is responsible for receiving information on the user's activities 
and comparing it to the user profile. The controller in Rowland does not employ the user 
profile to determine the access right of the user while the user is logging into the system. 

Next, the claimed invention identifies the need for a change in the access right 
profile in the computer system. The claimed invention automatically monitors, based on 
time, load or alarm state, the need to alter the right of a certain user or user group to e.g. 
run the operating system commands. Independent claim 10 includes a "means for 
recognizing the need for modification of the access right profiles in the computer 
system." For instance, this feature can be utilized to prevent the running of commands 
that are resource intensive at a time when the system is congested; thereby preventing 
fiirther overioad of the system. Rowland, on the other hand, simply changes the user 
profile every time the user logs into or out of the system. This element in Rowland 
clearly does not correspond to the modification of the access right profile in the claimed 
invention. Thus, this element of the claimed invention is not disclosed by the cited prior 
art. 



As mentioned previously, the Official Action took the position that the claimed 
invention was anticipated by Rowland. Applicants respectfully submit that Rowland fails 
to disclose or suggest critical and important elements of the claimed invention. These 
distinctions are more than sufficient to render the claimed invention unanticipated and 
unobvious. It is therefore respectfully requested that all of claims 1-17 be allowed, and 
this application passed to issue. 

If for any reason the Examiner determines that the application is not now in 
condition for allowance, it is respectfully requested that the Examiner contact, by 
telephone, the applicant's undersigned attorney at the indicated telephone number to 
arrange for an interview to expedite the disposition of this application. 

In the event this paper is not being timely filed, the applicant respectfully petitions 
for an appropriate extension of time. Any fees for such an extension together with any 
additional fees may be charged to Counsel's Deposit Account 50-2222. 
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Respectfully submitted. 
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